# # ChangeLog for trunk/server # # Generated by Trac 1.0.2 # Mar 28, 2024, 10:18:31 PM Wed, 27 Feb 2013 15:07:41 GMT adehnert [2379] * trunk/server/fedora/config/etc/logrotate.d/httpd (modified) Correctly set mode of suexec.log Historically, suexec.log has been ... Wed, 27 Feb 2013 09:01:29 GMT andersk [2378] * trunk/server/fedora/specs/rubygems.spec.patch (modified) Update rubygems to 1.8.25-1.scripts Wed, 27 Feb 2013 08:56:23 GMT achernya [2377] * trunk/server/common/patches/httpd-SSLCompression.patch (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Update to httpd 2.2.23 Wed, 27 Feb 2013 08:29:59 GMT andersk [2376] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) * trunk/server/fedora/specs/scripts-base.spec (modified) Use DKMS for OpenAFS Fri, 22 Feb 2013 04:59:19 GMT andersk [2375] * trunk/server/fedora/config/etc/postfix/main.cf (modified) * trunk/server/fedora/config/etc/postfix/virtual (modified) * trunk/server/fedora/config/etc/postfix/virtual_re (modified) Tighten scripts vhost mail security Broken MTAs such as MIT’s will ... Thu, 21 Feb 2013 21:51:42 GMT achernya [2374] * trunk/server/fedora/config/etc/httpd/vhosts.d/cons.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/dchang.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/cons.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/dchang.pem (modified) Certificate renewal for dchang; new certificate for cons Wed, 20 Feb 2013 21:39:54 GMT achernya [2373] * trunk/server/fedora/config/etc/httpd/vhosts.d/gsc.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/gsc.pem (modified) Certificate renewal for gsc Wed, 13 Feb 2013 22:54:33 GMT achernya [2372] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Block unresponsive spam-y user Sun, 10 Feb 2013 09:52:34 GMT andersk [2371] * trunk/server/common/patches/openafs-linux-support.patch (deleted) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (deleted) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/openafs.spec.patch (modified) Update to OpenAFS 1.6.2pre3 for kernel 3.7 support Sat, 26 Jan 2013 01:20:37 GMT andersk [2365] * trunk/server/fedora/config/usr/vice/etc/CellServDB.local (modified) New CellServDB from ops Wed, 23 Jan 2013 17:16:48 GMT achernya [2364] * trunk/server/fedora/config/etc/httpd/vhosts.d/classmates.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/psetcentral.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/schuh.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/classmates.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/psetcentral.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/schuh.pem (modified) Certificate renewal for classmates, psetcentral, schuh Thu, 17 Jan 2013 19:31:48 GMT achernya [2363] * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/specs/scripts-base.spec (modified) * trunk/server/fedora/specs/scripts-munin-plugins.spec (added) Package the 389ds munin monitoring plugin. Thu, 17 Jan 2013 04:19:18 GMT quentin [2362] * trunk/server/common/oursrc/scripts-munin-plugins/Makefile (added) Add makefile for scripts-munin-plugins Thu, 17 Jan 2013 04:03:05 GMT quentin [2361] * trunk/server/common/oursrc/scripts-munin-plugins (added) * trunk/server/common/oursrc/scripts-munin-plugins/389ds (added) Munin plugin for monitoring 389-ds Thu, 17 Jan 2013 00:44:56 GMT achernya [2360] * trunk/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem (modified) Certificate renewal for blog.gregbrockman.com Mon, 14 Jan 2013 05:18:09 GMT andersk [2359] * trunk/server/fedora/config/etc/ntp.conf (modified) /etc/ntp.conf: Refresh from Fedora 17 This enables queries on ::1, ... Mon, 14 Jan 2013 04:28:22 GMT andersk [2358] * trunk/server/fedora/config/etc/named.conf (modified) /etc/named.conf: Add stub zones for mit.edu and 18.in-addr.arpa Mon, 14 Jan 2013 04:12:38 GMT andersk [2357] * trunk/server/fedora/config/etc/hosts (modified) /etc/hosts: Add not-backward Tue, 08 Jan 2013 04:54:46 GMT achernya [2355] * trunk/server/fedora/config/etc/httpd/vhosts.d/cs6090.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/isawyou.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/cs6090.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/isawyou.pem (modified) Certificate renewal for cs6090 and isawyou Tue, 08 Jan 2013 04:53:33 GMT achernya [2354] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update postfix for version 2.9.5 Thu, 03 Jan 2013 05:02:34 GMT achernya [2353] * trunk/server/fedora/config/etc/httpd/vhosts.d/www.davidben.net.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/www.davidben.net.pem (added) Also add www.davidben.net Thu, 03 Jan 2013 04:45:05 GMT achernya [2352] * trunk/server/fedora/config/etc/pki/tls/certs/blog.gregbrockman.com.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bluechips.emergent-studios.com.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (modified) Clean up other similarly affected certificate chains Thu, 03 Jan 2013 04:26:46 GMT achernya [2351] * trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ashdown.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/barnowl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/be-it.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/cehs.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/classof2014.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/conner4.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crush.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/debathena.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/eastgate.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ec.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/fridget.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/hmmt.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/impact.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/listmon.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/maseeh.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/picker.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/pickr.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/rpl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sayno.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/signup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sipb.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/stalk.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/swe.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/techfair.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tf.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tours.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/twentytwelve.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ua.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/webathena.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) Remove InCommon Root CA from certificate chain MIT recently ... Thu, 03 Jan 2013 04:09:26 GMT achernya [2350] * trunk/server/fedora/config/etc/httpd/vhosts.d/davidben.net.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/davidben.net.pem (added) Certificate and configuration for davidben.net Wed, 02 Jan 2013 01:27:10 GMT adehnert [2349] * trunk/server/doc/install-fedora (modified) Minor corrections to networking/svn docs * lo:3 is consistent * ... Wed, 02 Jan 2013 01:19:29 GMT adehnert [2348] * trunk/server/doc/install-fedora (modified) Add section on the interaction of network and svn We've talked ... Mon, 31 Dec 2012 06:57:08 GMT achernya [2347] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/picker.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/pickr.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/eastgate.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/picker.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/pickr.pem (modified) Certificate renewal for eastgate, picker, pickr Wed, 26 Dec 2012 23:23:57 GMT achernya [2346] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Blacklist mount.nfs and netreport setuid binaries Wed, 26 Dec 2012 23:04:06 GMT achernya [2345] * trunk/server/fedora/config/etc/httpd/vhosts.d/crush.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/impact.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crush.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/impact.pem (modified) Certificate renewal for impact; new certificate for crush Sun, 23 Dec 2012 06:24:52 GMT andersk [2344] * trunk/server/fedora/config/etc/mock/scripts-fc17-i386.cfg (modified) * trunk/server/fedora/config/etc/mock/scripts-fc17-x86_64.cfg (modified) * trunk/server/fedora/config/etc/yum.repos.d/fedora.repo (modified) Disable mirrors for fedora.repo better. Sun, 23 Dec 2012 06:17:19 GMT andersk [2343] * trunk/server/fedora/config/etc/yum.repos.d/fedora.repo (modified) Disable mirrors for fedora.repo Sun, 23 Dec 2012 06:16:51 GMT andersk [2342] * trunk/server/fedora/config/etc/yum.repos.d/fedora.repo (added) Import pristine upstream /etc/yum.repos.d/fedora.repo Sun, 23 Dec 2012 03:35:46 GMT andersk [2341] * trunk/server/fedora/config/etc/httpd/vhosts.d/debathena.conf (modified) Add SSLCertificateChainFile to debathena.conf Thu, 13 Dec 2012 05:08:33 GMT andersk [2339] * trunk/server/fedora/specs/openssh.spec.patch (modified) Rediff openssh.spec.patch Sun, 09 Dec 2012 04:54:15 GMT achernya [2338] * trunk/server/fedora/config/etc/httpd/vhosts.d/bakerfoundation.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/be-it.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/cehs.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/peoplesearch.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bakerfoundation.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/be-it.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/cehs.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/peoplesearch.pem (modified) Certificate renewal for bakerfoundation, peoplesearch; initial ... Wed, 05 Dec 2012 07:21:01 GMT andersk [2337] * trunk/server/common/patches/openafs-linux-support.patch (added) * trunk/server/common/patches/openafs-stable-1.6.1.1.patch (deleted) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (copied) * trunk/server/fedora/specs/openafs.spec.patch (modified) Revert to OpenAFS 1.6.1 plus minimal patches for Linux 3.6 Wed, 21 Nov 2012 17:03:41 GMT quentin [2336] * trunk/server/fedora/config/etc/postfix/blocked_users (modified) Add maoting as a blocked mail sender Sat, 10 Nov 2012 20:21:56 GMT geofft [2335] * trunk/server/common/patches/openafs-linux-3.4-end-writeback.patch (deleted) * trunk/server/common/patches/openafs-linux-3.5-encode-fh.patch (deleted) * trunk/server/common/patches/openafs-stable-1.6.1.1.patch (added) * trunk/server/common/patches/openafs-systemd-remote-fs.patch (deleted) * trunk/server/fedora/specs/openafs.spec.patch (modified) Create patch for current openafs-stable-1_6_x as fake 1.6.1.1 ... Mon, 05 Nov 2012 19:08:51 GMT achernya [2334] * trunk/server/fedora/config/etc/pki/tls/certs/ashdown.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ec.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/listmon.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sayno.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/swe.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/techfair.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tf.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) Certificate renewal fixup ashdown, ec, listmon, sayno, swe, techfair, ... Mon, 05 Nov 2012 19:05:28 GMT achernya [2333] * trunk/server/fedora/config/etc/httpd/vhosts.d/ashdown.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ec.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/listmon.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/sayno.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/swe.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/techfair.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/tf.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/whatsnext.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ashdown.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ec.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/listmon.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sayno.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/swe.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/techfair.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/tf.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/whatsnext.pem (modified) Certificate renewal for ashdown, ec, listmon, sayno, swe, techfair, ... Wed, 31 Oct 2012 05:19:41 GMT achernya [2332] * trunk/server/fedora/config/etc/httpd/vhosts.d/hmmt.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/hmmt.pem (modified) Certificate renewal for hmmt Thu, 11 Oct 2012 16:18:35 GMT achernya [2331] * trunk/server/fedora/config/etc/httpd/vhosts.d/barnowl.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/fridget.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/maseeh.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/signup.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/sipb.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/twentytwelve.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/ua.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/barnowl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/fridget.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/maseeh.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/signup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/sipb.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/twentytwelve.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ua.pem (modified) Certificate renewal for barnowl, fridget, maseeh, signup, sipb, ... Sat, 06 Oct 2012 19:46:19 GMT quentin [2330] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Partially revert r2329, and set postfix's inet_protocols to the ... Fri, 05 Oct 2012 02:25:42 GMT glasgall [2329] * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (added) * trunk/server/fedora/config/etc/postfix/main.cf (modified) re-enable westgate vhost Tue, 02 Oct 2012 00:45:25 GMT achernya [2328] * trunk/lvs/debian/config/etc/aliases (modified) * trunk/server/fedora/config/etc/aliases (modified) Add glasgall to aliases for root Sun, 30 Sep 2012 02:43:55 GMT achernya [2327] * trunk/server/fedora/config/etc/httpd/vhosts.d/cdsa.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/cdsa.pem (deleted) Remove cdsa certificate; no longer hosted on scripts Mon, 24 Sep 2012 22:15:40 GMT achernya [2326] * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (deleted) Remove westgate configuration Mon, 24 Sep 2012 21:26:02 GMT achernya [2325] * trunk/server/fedora/config/etc/httpd/vhosts.d/rpl.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/stalk.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/rpl.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/stalk.pem (modified) Certificate renewal for rpl and stalk Mon, 24 Sep 2012 20:25:22 GMT achernya [2324] * trunk/server/fedora/config/etc/httpd/vhosts.d/crosslinks.conf (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/crosslinks.pem (deleted) Remove certificate and configuration for crosslinks, no longer on Scripts Mon, 24 Sep 2012 20:13:01 GMT achernya [2323] * trunk/server/fedora/config/etc/httpd/vhosts.d/bluechips.emergent-studios.com.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/bluechips.emergent-studios.com.pem (modified) Certificate renewal for bluechips.emergent-studios.com Sat, 15 Sep 2012 22:17:09 GMT quentin [2322] * trunk/server/fedora/config/etc/httpd/vhosts.d/conner4.conf (added) * trunk/server/fedora/config/etc/httpd/vhosts.d/webathena.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/conner4.pem (added) * trunk/server/fedora/config/etc/pki/tls/certs/debathena.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/webathena.pem (added) Add certs for webathena, conner4, and update cert for debathena. Thu, 13 Sep 2012 01:08:54 GMT geofft [2321] * trunk/server/common/patches/httpd-SSLCompression.patch (added) * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) Disable SSL compression to defend against rumored side-channel attack Sun, 09 Sep 2012 18:48:22 GMT andersk [2320] * trunk/server/fedora/ref-prepatch (deleted) Remove ref-prepatch We’ve never updated this, and it’s not how ... Thu, 06 Sep 2012 03:41:51 GMT ezyang [2318] * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-xvm (modified) Notes for setting up XVM test server. Wed, 05 Sep 2012 04:41:23 GMT adehnert [2317] * trunk/server/doc/install-xvm (modified) We're well past F9, and the filename should reflect that Wed, 05 Sep 2012 04:39:22 GMT adehnert [2316] * trunk/server/doc/install-howto.sh (modified) Minor updates to the install instructions Wed, 05 Sep 2012 04:11:51 GMT ezyang [2315] * trunk/server/doc/install-xvm (modified) Updated XVM instructions plus kickstarter. Sat, 01 Sep 2012 14:30:45 GMT ezyang [2313] * trunk/server/common/oursrc/accountadm/cronload (modified) More robust error handling for cronload, by btidor. Wed, 29 Aug 2012 15:34:05 GMT achernya [2308] * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (modified) Add intermediate certificates for luke.wf Mon, 20 Aug 2012 03:25:40 GMT quentin [2307] * trunk/server/common/oursrc/accountadm/get-homedirs (modified) Only dump real user accounts, and not LDAP-only users. Sat, 18 Aug 2012 17:03:46 GMT ezyang [2306] * trunk/server/common/oursrc/hsparfind/hsparfind.hs (modified) Don't starve non-find commands, handle concurrent writes to file. Sat, 18 Aug 2012 16:33:33 GMT ezyang [2305] * trunk/server/common/oursrc/hsparfind (added) * trunk/server/common/oursrc/hsparfind/hsparfind.hs (added) Haskell version of parallel-find. Fri, 17 Aug 2012 20:44:02 GMT ezyang [2304] * trunk/server/fedora/config/etc/sudoers (modified) Allow user list generation to access LDAP credentials. Fri, 17 Aug 2012 20:35:01 GMT ezyang [2303] * trunk/locker/sbin/get-homedirs.sh (deleted) * trunk/server/doc/install-howto.sh (modified) Revert previous commit. Fri, 17 Aug 2012 20:30:48 GMT ezyang [2302] * trunk/server/doc/install-howto.sh (modified) A note for the next maintainer to mailbomb us. Fri, 17 Aug 2012 04:10:39 GMT ezyang [2301] * trunk/server/fedora/specs/krb5.spec.patch (modified) Bump Kerberos version and fix fuzz. Fri, 17 Aug 2012 04:08:53 GMT ezyang [2300] * trunk/server/fedora/specs/accountadm.spec (modified) List get-homedirs in files list for accountadm Fri, 17 Aug 2012 01:13:15 GMT ezyang [2299] * trunk/server/common/oursrc/accountadm/Makefile.in (modified) * trunk/server/common/oursrc/accountadm/get-homedirs (copied) Make get-homedirs part of accountadm package, so that we can ... Thu, 16 Aug 2012 14:46:28 GMT ezyang [2298] * trunk/server/doc/install-howto.sh (modified) More updates from Wizard install. Tue, 14 Aug 2012 08:04:50 GMT geofft [2296] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to Postfix 2.9.4 Tue, 14 Aug 2012 07:19:32 GMT geofft [2295] * trunk/server/fedora/config/etc/httpd/vhosts.d/ai6034.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/classof2014.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ai6034.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/classof2014.pem (modified) Certificate renewals for ai6034 and classof2014 Wed, 08 Aug 2012 15:17:06 GMT ezyang [2294] * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) Message no long occurs due to upstream fix ... Wed, 08 Aug 2012 15:15:29 GMT ezyang [2293] * trunk/server/fedora/config/etc/cron.d/check-filecaps (modified) File capabilities respect nosuid too ... Wed, 08 Aug 2012 13:50:47 GMT ezyang [2292] * trunk/server/fedora/config/etc/cron.d/check-setugid (modified) Ignore setuid binaries in /var/lib/mock, which are nosuid'd Tue, 07 Aug 2012 10:46:24 GMT ezyang [2291] * trunk/server/fedora/config/etc/systemd/system/multi-user.target.wants/var-lib-mock.service (added) * trunk/server/fedora/config/etc/systemd/system/var-lib-mock.service (added) Remount /var/lib/mock as nosuid Tue, 07 Aug 2012 06:30:28 GMT achernya [2290] * trunk/server/fedora/config/etc/pki/tls/certs/mitchief.org.pem (added) Really add the mitchief cert. Tue, 07 Aug 2012 06:21:29 GMT achernya [2289] * trunk/server/fedora/config/etc/httpd/vhosts.d/mitchief.org.conf (added) Certificate and configuration for mitchief.org Sun, 05 Aug 2012 14:26:57 GMT ezyang [2288] * trunk/server/common/patches/openafs-linux-3.4-end-writeback.patch (added) * trunk/server/common/patches/openafs-linux-3.5-encode-fh.patch (added) * trunk/server/fedora/specs/openafs.spec.patch (modified) OpenAFS for Linux 3.5 Wed, 01 Aug 2012 09:23:33 GMT geofft [2283] * trunk/server/fedora/config/etc/httpd/vhosts.d/asa.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/axo.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/crew.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/familynet.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/mitsoc.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/next.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/random-hall.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/wakeup.conf (modified) * trunk/server/fedora/config/etc/httpd/vhosts.d/westgate.conf (modified) Add SSLCertificateChainFile for the renewals from r2282 Wed, 01 Aug 2012 09:21:09 GMT geofft [2282] * trunk/server/fedora/config/etc/pki/tls/certs/asa.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/axo.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/crew.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/familynet.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/mitsoc.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/next.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/random-hall.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/wakeup.pem (modified) * trunk/server/fedora/config/etc/pki/tls/certs/westgate.pem (modified) A pile of certificate renewals Tue, 31 Jul 2012 13:36:32 GMT achernya [2273] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Actually chmod the files, too Tue, 31 Jul 2012 13:31:35 GMT achernya [2272] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) /sbin moved too Tue, 31 Jul 2012 13:29:58 GMT achernya [2271] * trunk/server/fedora/config/etc/yum/post-actions/statoverride.action (modified) Update statoveride post-action for /bin -> /usr/bin transition Sat, 28 Jul 2012 20:56:14 GMT ezyang [2270] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Add Scripts-IP for debugging purposes (identify real server, no X- ... Sat, 28 Jul 2012 04:43:05 GMT ezyang [2268] * trunk/server/doc/cutover (modified) Cutover updates Fri, 27 Jul 2012 19:35:56 GMT andersk [2267] * trunk/server/fedora/config/etc/php.ini (modified) * trunk/server/fedora/config/etc/tmpfiles.d (added) * trunk/server/fedora/config/etc/tmpfiles.d/scripts-php-sessions.conf (added) Move php sessions to /var/lib/scripts-php-sessions Fri, 27 Jul 2012 17:47:41 GMT achernya [2266] * trunk/server/fedora/config/etc/httpd/vhosts.d/metu.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/metu.pem (modified) Certificate renewal for metu.mit.edu Tue, 24 Jul 2012 23:00:29 GMT andersk [2265] * trunk/server/common/oursrc/accountadm/mbash.in (modified) mbash: exec bash This is far from ideal—we still lose the login ... Sun, 22 Jul 2012 01:39:42 GMT adehnert [2264] * trunk/server/fedora/config/etc/httpd/conf/httpd.conf (modified) Switch to upstream cipher suites Sat, 21 Jul 2012 23:46:37 GMT geofft [2263] * trunk/server/fedora/config/etc/httpd/vhosts.d/luke.wf.conf (added) * trunk/server/fedora/config/etc/pki/tls/certs/luke.wf.pem (added) Certificate and configuration for luke.wf and www.luke.wf Fri, 06 Jul 2012 16:49:42 GMT achernya [2258] * trunk/server/fedora/config/etc/httpd/vhosts.d/ailg-bdf.conf (deleted) * trunk/server/fedora/config/etc/httpd/vhosts.d/nudelta.conf (modified) * trunk/server/fedora/config/etc/pki/tls/certs/ailg-bdf.pem (deleted) * trunk/server/fedora/config/etc/pki/tls/certs/nudelta.pem (modified) Certificate renewal for nudelta; remove ailg-bdf as it is not configured Sun, 01 Jul 2012 10:37:58 GMT adehnert [2257] * trunk/server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Serve Django 1.4 admin media Django 1.4 relocated the admin media ... Fri, 29 Jun 2012 04:23:15 GMT quentin [2256] * trunk/server/fedora/config/etc/nagios/nrpe.cfg (modified) Add a NRPE command for monitoring SMTP on localhost Fri, 29 Jun 2012 03:32:19 GMT quentin [2255] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Partially revert r2254, and allow postfix to calculate its own ... Fri, 29 Jun 2012 03:18:55 GMT achernya [2254] * trunk/server/fedora/config/etc/postfix/main.cf (modified) Update to postfix 2.9.3 Thu, 28 Jun 2012 15:11:46 GMT achernya [2252] * trunk/server/fedora/config/etc/ssh/ssh_known_hosts (modified) Add m-c and l-s to known hosts Thu, 28 Jun 2012 15:02:08 GMT achernya [2251] * trunk/server/fedora/config/etc/ssh/shosts.equiv (modified) * trunk/server/fedora/config/etc/ssh/sshd_config (modified) Enable hostbased to m-c and l-s Thu, 28 Jun 2012 02:29:47 GMT ezyang [2246] * trunk (modified) * trunk/host/credit-card/host.py (modified) * trunk/locker (modified) * trunk/server/common/oursrc/php_scripts/php_scripts.h (modified) * trunk/server/common/oursrc/sql-signup/sql-signup-pam (modified) * trunk/server/common/oursrc/tokensys/scripts-afsagent-startup.in (modified) * trunk/server/common/patches/httpd-sysv-deps.patch (deleted) * trunk/server/doc/install-howto.sh (modified) * trunk/server/doc/install-ldap (modified) * trunk/server/doc/upgrade-tips (modified) * trunk/server/fedora/Makefile (modified) * trunk/server/fedora/config/etc/default (copied) * trunk/server/fedora/config/etc/hosts (modified) * trunk/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (modified) * trunk/server/fedora/config/etc/mock/scripts-fc17-i386.cfg (copied) * trunk/server/fedora/config/etc/mock/scripts-fc17-x86_64.cfg (copied) * trunk/server/fedora/config/etc/modules-load.d/binfmt_misc.conf (copied) * trunk/server/fedora/config/etc/scripts/allowed-filecaps.list (modified) * trunk/server/fedora/config/etc/scripts/allowed-setugid.list (modified) * trunk/server/fedora/config/etc/sysconfig/dirsrv (copied) * trunk/server/fedora/config/etc/sysconfig/dirsrv-scripts (copied) * trunk/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) * trunk/server/fedora/config/etc/syslog-ng/d_zroot.pl (modified) * trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (modified) * trunk/server/fedora/specs/ghc-MonadCatchIO-mtl.spec (deleted) * trunk/server/fedora/specs/ghc-cgi.spec (modified) * trunk/server/fedora/specs/ghc-unix-handle.spec (modified) * trunk/server/fedora/specs/httpd.spec.patch (modified) * trunk/server/fedora/specs/krb5.spec.patch (modified) * trunk/server/fedora/specs/openssh.spec.patch (modified) * trunk/server/fedora/specs/redland-bindings.spec.patch (deleted) * trunk/server/fedora/specs/rubygems.spec.patch (modified) * trunk/server/fedora/specs/scripts-static-cat.spec (modified) Reintegrate Fedora 17 development branch into trunk. Tue, 26 Jun 2012 18:02:16 GMT achernya [2237] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap, again Mon, 25 Jun 2012 16:02:37 GMT achernya [2234] * trunk/server/fedora/config/etc/httpd/vhosts.d/eastgate.conf (modified) Reify eastgate.conf to bring it in sync with ldap